Forget SOPA, You Should Be Worried About This Cybersecurity Bill

from the this-is-not-good dept

While most folks are looking elsewhere, it appears that Congress is trying to see if it can sneak an absolutely awful "cybersecurity" bill through Congress. We've discussed how there's been some fighting on the Senate side concerning which cybersecurity bill to support, but there's a similar battle going on in the House, and it appears that the Rogers-Ruppersberger bill, known as CISPA (for Cyber Intelligence Sharing and Protection Act) or HR 3523 is winning out, with a planned attempt to move it through Congress later this month. The bill is awful -- and yet has somehow already gained over 100 sponsors. In an attempt to pretend that this isn't a "SOPA-like" problem, the supporters of this bill are highlighting the fact that Facebook, Microsoft and TechAmerica are supporting this bill.

However, this is a terrible bill for a variety of reasons. Even if we accept the mantra that new cybersecurity laws are needed (despite a near total lack of evidence to support this -- and, no, fearmongering about planes falling from the sky doesn't count), this bill has serious problems. As CDT warned when this bill first came out, it's way too broad and overreaching:

However, the bill goes much further, permitting ISPs to funnel private communications and related information back to the government without adequate privacy protections and controls. The bill does not specify which agencies ISPs could disclose customer data to, but the structure and incentives in the bill raise a very real possibility that the National Security Agency or the DOD’s Cybercommand would be the primary recipient.

If it's confusing to keep track of these different cybersecurity bills, the ACLU has put together a handy dandy (scary) chart (pdf) comparing them all. And what comes through loud and clear is that the Rogers-Ruppersberger CISPA bill will allow for much greater information sharing of companies sending private communication data to the government -- including the NSA, who has been trying very, very hard to get this data, not for cybersecurity reasons, but to spy on people. CISPA has broad definitions, very few limits on who can get the data, almost no limitations on how the government can use the data (i.e. they can use it to monitor, not just for cybersecurity reasons) and (of course) no real oversight at all for how the data is (ab)used.

CDT has put together a reasonable list of 8 things that should be done if politicians don't want to turn cybersecurity into a new SOPA, but so far, Congress is ignoring nearly all of them. Similarly, EFF is asking people to speak out against CISPA, noting that it basically creates a cybersecurity exemption to all existing laws. If the government wants your data, it just needs to claim that it got it for "cybersecurity purposes" and then it can do pretty much whatever it wants.

This is a really bad bill and it looks like it's going to pass unless people speak up.

Even if we accept the mantra that new cybersecurity laws are needed (despite a near total lack of evidence to support this -- and, no, fearmongering about planes falling from the sky doesn't count), this bill has serious problems.

Thank douchebags like lulzsec and others. Stupid shit like taking down the White House website, the Library of Congress (really??) and other government sites has created all the justification and motivation for more cyber security laws.

Re: Why does it always go this way...

That's the last thing the Government needs...Educated citizens. Why do you think they're working so hard to "pass" students with policies such as "no one left behind." Also, the money that US states spend on prisons has risen at 6x the rate of spending on higher education. http://t.co/7BaxIzQd. Why don't we stop trying to put everyone in prison and start educating them.

You know...

If this bill is such a bad thing to worry about, why wasn't it reported on until now? I looked at the links in this article and it passed committee last December. And unlike SOPA, I'm not liking the chances of stopping this one.

Re:

Thank douchebags like lulzsec and others. Stupid shit like taking down the White House website, the Library of Congress (really??) and other government sites has created all the justification and motivation for more cyber security laws.

You really think that some idiot kids doing some temporary vandalism is the justification needed to take away your privacy and letting the gov't spy on everyone? Are you insane?

If this bill is such a bad thing to worry about, why wasn't it reported on until now?

That's by design - haven't people noticed congress' tactics yet?

Release some nonsensical bill that could never pass - while a furor ensues - they pass the one they had intended to pass all along behind the backs of the people. It's why Dec. 31st is such a popular day for just that.

Re:

You WAY overvalue the average person's desire to take action and fight for anything. Most are either a) happy enough to coast through life or b) would rather just leave and go somewhere better than actually fight for it.

I'm currently on a), but would not be averse to b) if things get as bad as it might.

Re:

I just called all the reps from my state and none of the staffers were willing to tell me where the representative stood on these bill. This list confirms that the staffers must know and are not willing to tell the very people they "represent" the truth. Its sickening how so disconnected the voters' perspective is from the process.

what the hell is this absolutely desperate need for the US government to be able to rip apart every part of it's citizens privacy? what is happening that is so dastardly that every citizen is an active part of it? if there are particular people who are considered a threat, watch them, but not the entire country. that is insane! going back to the 'reds under the bed', 'everyone is a communist' days. ridiculous!

You really think that some idiot kids doing some temporary vandalism is the justification needed to take away your privacy and letting the gov't spy on everyone? Are you insane?

No, but our 'leaders' are insane...

These are just the things they use to push these laws. Of course, the media hypes it like it's a huge deal.

We, as IT people know that 'lulzsec' - or whatever, is likely pimple faced basement dwelling intorverts that know how to script well, because the only friends they have are Notepad++ and The internet.

But give that to the media and the spin becomes:

"Malicious hacking group 'lulsec' is threatening the country by hacking the DOD's web site... " - yada yada...

When all that was really done is some joke put up on the main page, etc.

So NO, it's not a legit justification technically, but spin it in the media and it will become the 'justification' that congress needs to pass more laws that take away our rights and give them to corporations.

Re: Re:

Take off the tinfoil hat for a second Masnick. I'm only saying that these stupid acts have provided the public basis to justify more intrusive laws like this. And it doesn't help that while this was going on, many were cheering them along and other prominent organizations and corporations who seem to believe that they should be consulted on tech policy, failed to condemn this stupid vandalism.

Re: Re: Re:

Because some kid spray painted a wall, we should have laws requiring electronic tethers on all children?

The media sensationalized the "attacks", but thats what they do. They work people up into a frenzy for laughs.

However our elected leaders aren't supposed to be freaking uninformed morons. They have their staff, researchers, reports, etc. at their finger tips... and they just feed into the hype rather than actually say this is overhyped, here are facts.

People need to teach them a lesson and refuse to buy,rent,download, and go to the theaters.
30-60 Days I can guarantee that would make the fuckers change their viewpoint pretty fucking fast.

I've not seen a movie since the raid on mega. It was boring at first to give up all the T.V. time and trips to the theaters.

With the extra 3-4 hours I save every single day I've became way more productive and have managed to shed a few pounds.

So with that said I will say thank you very much to the movie and music industries for giving me my life back.

The only regrets I have is that if I knew this is the way they wanted stuff I would have never bought satellite T.V. or wasted countless gallons of gas for the 40 mile round trip to see movies on the big screen every week.

Even if they did back down and tell the world sorry I will never be a customer for any of them again.

I hope some others decide to do similar shit and find out something about yourself you would've never known otherwise. For me it was losing the weight about 35 lbs.

I'm no longer a fat ass and I managed to do it all on the fuck MPAA,RIAA diet.

Re: Re: Re:

And it doesn't help that while this was going on, many were cheering them along and other prominent organizations and corporations who seem to believe that they should be consulted on tech policy, failed to condemn this stupid vandalism.

Are you serious? Almost everyone I know -- including us -- condemned those actions as counterproductive.

Re: Why does it always go this way...

my classmate's step-sister makes $62/hour on the internet. She has been unemployed for 8 months but last month her pay was $16933 just working on the internet for a few hours. Here's the site to read more..

Re: Re: Re: Re:

I don't recall statements of condemnation from EFF, CDT, Public Knowledge, Reddit, Google and the rest of the anti-SOPA crowd.

Saying LulzSec's actions were a "bad idea", then turning around and saying that the FBI arresting them was probably a mistake that will spawn more such behavior is hardly condemnation. It's you parsing words again. Maybe you should go re-read some of the user comments. They are generally laudatory or dismissive of their actions. I don't recall a single comment saying that this is simply wrong.

The only real concern was that LulzSec's actions would elicit an unfavorable response- kind of like the Rogers-Ruppersberger bill.

Re: Re: Re: Re:

Re:

there will always be those who push the boundaries of what is acceptable morally and lawfully. to punish the entire populous based on the actions of such a small number of people is just foolish.

To put that argument into perspective, lets change the crime into something physical like murder. it's bad, we can agree on that. some people murder others. so what if we were all punished for the last murder... that 17 yr old in Florida for example. how would you feel about that?

Does anyone remember?

Does anyone remember Obama's promises during his campaign. He promised the American people more transparency in government and stated all proposed legislation would be available for view by the public prior to congressional action. Need a laugh read this
If anything, the government has become less transparent under his watch. Do I think McCain would have been better... of course not.
The question is, when are we going to stand-up to this tyranny by deception? When will we say enough is enough, and demand a government for the people, not a government watching the people?

Re: You know...

It's a conspiracy. The Government shoulnd't be able to pass laws like this , which put the jeopardy of normal citizens privacy at risk. They are destroying the world most amazing creation. And they do it because of money. OH yeah Money is the root of all evil.

thinking caps plus data

Maybe we should be trying to figure out from it's beginning on whom is try so hard to push these type Bills through?

Seems as fast as one gets killed there is always another to replace it. So there has to be a certain group, or business that has their heart set on passing this. It doesn't spring up without a reason. Someone has to do the pushing.

Re: Re: Why does it always go this way...

Re: Why does it always go this way...

It's america sir. We take credit only for our great oppressions on evil, but not fore the oppressions we make that are. The deeper in to life we go, the more hell we spawn. Our government is one of billions of issues that just need to stop abd shut the hell up for once. Hopefully anonymous and others who are bluntly saying "STFU" right at them will get to them. Right about now is the timing for a revolt, as have many other countries in the past. This one will more or less involve death and destruction, but more or less, the government will fold in on itself and we, the people, shall take it.

Is there no nd to these billsmaking a massive spy network for the government? As a Canadian these bills worry me the most because not only are they powerful enough to start filling our prisons up with nerds... geeks... And programmers who's inteligence makes them a threat to "national security" aka "Governments international Slave Network for monopoly money"

The american dollar holds no value as anything but a token of servitude. The less money you have the greater slave you will always be.

Want to watch the world burn? Take All your money, all your reasources out of banks. Banks that take your money and reasources that support the corperations that enslave you and the government that imprisons the free thinkers of our society.

The only way anyone is going to get out of this alive is what could only be called a governmental Genocide. Sad to say but Republicans and Democratic officials of every sort is going to have to die. The people need to form a new government. One based on Freedom not slavery and security.

Nobody wants to say bloodshed isn't the only way out of slavery but the government has already resorted to bloodshed upon the people.

Do your part and show that the people can be terrorists because anyone who opposes the Secured slavery of all American people has already been labeled a terrorist. Your going to prison anyways in the long run so you might as well fight the power that's going to put you there.

You are all violent criminals expressiong violent ideas and fighting for freedom. Something you do not have. Rally before the government has the power to cut down free thinking before it can oppose it.

If the people don't stand up now and one of these bills passes. You will simply always be slaves. Step out of line and I am sure the blue collar slaves will have built a prison for you.

Re:

yur pretty much misinformed...SOPA and PIPA were pushed by Hollywood etc.,big media...the govt. wants to use it to clamp down on internet freedom and track trends for the benefit of control...control for their corporate masters,the richest 1%...ALL of what our government has been doing since 911 has been not about external threats and national security,thats just an excuse...its about control and manipulation of the common folk for the benefit of the rich and very rich...the ones that hold the power and yeild it with the government as their tool.

Re: Re: Re:

-1 Interwebs to you Sir.

This is not sufficient rational to take away more privacy from you, freedoms from you and from those you care about.

Your shortsightedness is as frightening. I am concerned that you and others like you that drank the government kool-aid of fear and suspicion cannot see the bigger picture. More government intervention in your life, whether it is for protecting *AA profits or supposedly protecting you from terrorists is simply unacceptable.

I am not in favor of the government watching over every thing I or mine does. Why are you??

I sent an email to all of my representatives (all of which thankfully are not cosponsors). If things start ramping up I'll call them as well (did the same thing for SOPA, the next day the senator I called came out against so I know I wasn't the only one).

One thing to keep in mind is that specific and well-thought reasons for opposing legislation goes far further than a form letter. So when given the option, make sure to put your personal touch to it.

Re:

Uhh this isnt to catch lulzsec or Anonymous, these guys are wayyy smarter thany anyone in your government, they will get around this like a showhorse clears a hurdle. Non this cybersecuroty bill is to catch you the average citizen. The corperate masters want to know when you are pirating stuff so they can arrest or sue you or both. It's also for the powers that be to make sure there is nothing like the Arab Spring in the united states. Look at the role of twitter and Youtube, and facebook and texting in the popular uprisings around the world. Look at it in your own Occupy movements. The people who are in power want to keep the average joe from seeing the evidence or repression and organizing against it. This is to keep you guys in line...no one else

Response to: Anonymous Coward on Apr 2nd, 2012 @ 11:12am

Have any of you bothered to read the bill?
what I see this bill doing is granting designated "private" entities such as a Blackwater or its equivalent access to classified information and grants them the ability to SPY on behalf of the US government: its privetising the CIA and FBI
with complete protection from wrong doing!!!

Re: thinking caps plus data

Take a close look at the wording in all of them and you'll find references to "protecting the economy" and intellectual property.

The people behind it are the MPAA, RIAA, and other IP maximalists. Their other projects include ACTA and TPP. They won't stop until IP law is reformed or they succeed in getting us all under surveillance by our own ISPs.

Personally, I prefer IP reform. If there's less for them to gain by pushing such laws they'll stop pushing them.

HACKERS HAVE PROVEN REVOLUTION IS POSSIBLE

LUZSEC ANONYMOUS AND HOPEFULLY MANY MORE TO COME ARE THE NEW WORLDS REVOLUTIONARY GUARD. WE SHOULD KNOW ABOUT INJUSTICES COMMITTED BY AUTHORITIES. HACKING IS OUR ONLY HOPE. GONE ARE THE PRINCIPLES OF PRIVATE MILITIA. THEY ARE NOW TERRORIST. BUT THE REAL TERRORISM BEGAN HERE. AGAINST EVERY NON WHITE CITIZEN AND HAS BEEN SUBVERTED AND ROOTED AS US AGAINST THEM WE ARE THEM. UNLESS SOMEONE EXPOSES IT WE WILL CONTINUE TO BELIEVE LIES. HACK FOR GOOD WE'RE ALL COUNTING ON YOU. THIS IS A DEVICE OF SUBVERTING POWER. GRANTING CORPORATIONS AUTHORITY. THIS IS HOW THE DOD GETS AROUND THE GENEVA CONVENTION RULES REGARDING TORTURE AND WAR CRIMES. CORPORATIONS DON'T SIGN TREATIES OR HAVE CONSTITUTIONAL OBLIGATION. FEAR THOSE PROPAGATING SUBVERSION FORCE THEM INTO THE LIGHT HACK HACK HACK... HIDE YOUR TRACKS.

HACKERS HAVE PROVEN REVOLUTION IS POSSIBLE

LUZSEC ANONYMOUS AND HOPEFULLY MANY MORE TO COME ARE THE NEW WORLDS REVOLUTIONARY GUARD. WE SHOULD KNOW ABOUT INJUSTICES COMMITTED BY AUTHORITIES. HACKING IS OUR ONLY HOPE. GONE ARE THE PRINCIPLES OF PRIVATE MILITIA. THEY ARE NOW TERRORIST. BUT THE REAL TERRORISM BEGAN HERE. AGAINST EVERY NON WHITE CITIZEN AND HAS BEEN SUBVERTED AND ROOTED AS US AGAINST THEM WE ARE THEM. UNLESS SOMEONE EXPOSES IT WE WILL CONTINUE TO BELIEVE LIES. HACK FOR GOOD WE'RE ALL COUNTING ON YOU. THIS IS A DEVICE OF SUBVERTING POWER. GRANTING CORPORATIONS AUTHORITY. THIS IS HOW THE DOD GETS AROUND THE GENEVA CONVENTION RULES REGARDING TORTURE AND WAR CRIMES. CORPORATIONS DON'T SIGN TREATIES OR HAVE CONSTITUTIONAL OBLIGATION. FEAR THOSE PROPAGATING SUBVERSION FORCE THEM INTO THE LIGHT HACK HACK HACK... HIDE YOUR TRACKS.

Re: Re: Re: Re: Re:

*yawn*
I've got the right avatar so I'll speak up.

LulzSec was entertaining.
LulzSec pointed out the amazing disparity of security out on the web.
Everyone wants to pillory LulzSec, but how much shit did Sony catch for not patching well documented holes into their systems? Oh thats right they decided to skip the Congressional Hearing on the matter. They get to write off the "credit monitoring" and cry about how much it cost, when they could have spent much less previously to I dunno encrypt the freaking data.

LulzSec did something people needed to see, there is no great and powerful Oz there is a scared little man behind a curtain.

Lulzsec gave us amazing headlines of Cybergeddon!!!! Blargh...
No one has questioned the media and their total lack of reality in their reports.

Do I think they are the bestest people on the planet, nope.
But they haven't disappeared anyone into a black ops site somewhere else in the world to torture information out of them.

ZOMG THEY HACKED THE CIA!
Truth - they defaced and took down a front facing website of no real consequence.

ZOMG THEY HACKED CONGRESS!
Truth - they defaced and took down a front facing website to prove a point, a hacked website should NOT be considered an act of war.

ZOMG THEY HACKED SOME SHERIFFS OFFICE!
Truth - using an unsecured outsourced site should be illegal. Storing sensitive information on those servers should be a crime.

So other than your demand, why should anyone else who is part of the "anti-SOPA" crowd bother to make a statement on what some gifted kiddies did? They aren't congresscritters who have to get soundbites out to make sure they are on the right side of the issue.

The FBI arresting LulzSec will be a mistake. It will motivate more people to continue the work. It shows that with all of the corruption and problems in the world the greatest crime is to show contempt for a corporation.

Oh and Mike isn't responsible for user comments, they are made by OTHER people rather than the other voices you hear in your head.

While the actions of LulzSec might have sped up the timetable to pretend this bill wasn't already in the planning stages is delusional. The cranky old men have figured out the kids are using the new fangled interwebs thing to plot against them and speak out, and they need to be stopped.

Re:

Re:

With a federal government that controls all the big weapons, the military, can take control of local law enforcement, AND can monitor all our communications and track where we are all the time just HOW could such a revolution take place?

cispia

Re:

Yeah, And do you know why they're doing those things or are you just going in half-cocked on an issue that goes deeper than some DDoS attempts by Lulzsec and Anonymous. The government is bringing down a hammer quietly on the freedom we have in the internet. It's only a matter of time before the government decides to implement that killswitch, or place monitors like these all over the country. We've seen it in North Africa, Why not here? Feasiblity is not an issue. We have to stop these bills that are getting passed under our noses, and fast. Freedom my ass. It's a sham for a aristocracy.